Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/cXVg9TsTBRuvFALLJgdOmp-0FiY.roa
File:                     cXVg9TsTBRuvFALLJgdOmp-0FiY.roa (raw, json)
Hash identifier:          i7Wv14MeyTj+U7s/k/SMCNkD3IKZkIG54ZcFazXwav0=
Subject key identifier:   71:75:60:F5:3B:13:05:1B:AF:14:02:CB:26:07:4E:9A:9F:B4:16:26
Certificate issuer:       /CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
Certificate serial:       0D0D97DB
Authority key identifier: 00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/cXVg9TsTBRuvFALLJgdOmp-0FiY.roa
Signing time:             Thu 26 May 2022 08:27:56 +0000
ROA not before:           Thu 26 May 2022 08:27:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204703
IP address blocks:        185.153.93.0/24 maxlen: 32
                          2a0c:f280::/29 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218994651 (0xd0d97db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
        Validity
            Not Before: May 26 08:27:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=717560f53b13051baf1402cb26074e9a9fb41626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7a:b8:c0:32:92:df:c2:e8:a1:35:19:b3:a9:
                    62:63:4a:a2:15:8b:61:61:cc:a2:b2:a2:de:1b:7d:
                    42:29:08:84:a8:08:6f:bb:dd:9d:30:dc:ca:e8:7e:
                    c4:ce:77:2d:75:60:c1:99:81:2a:ea:ec:10:1e:cc:
                    08:78:32:dd:32:37:4e:1d:2e:4b:c1:3e:2c:43:e8:
                    3f:10:53:ec:1b:2c:1a:1b:94:aa:91:7c:73:a3:53:
                    93:d0:b6:83:72:fa:89:69:33:1c:f8:cc:ec:1c:79:
                    79:b0:7a:01:0a:99:8e:43:5e:d5:98:31:fd:5c:03:
                    47:b1:20:76:70:dd:a0:45:1c:a5:75:4e:5b:f1:1b:
                    c0:77:0c:b2:3a:b1:bb:9c:03:9a:50:95:47:52:81:
                    e2:90:df:88:4c:a9:72:17:9c:83:84:fa:b1:82:74:
                    ec:0b:7e:68:fd:70:ea:57:b5:58:be:88:fb:90:79:
                    b6:43:92:bc:69:49:ee:5b:fd:31:a4:70:13:0f:be:
                    03:e8:74:9b:c8:f1:cb:ad:45:4c:fa:54:2e:b4:63:
                    d6:f9:5f:df:81:96:50:53:90:26:13:26:cd:cc:3c:
                    ee:c8:05:e4:14:d1:49:07:5a:fe:fd:ea:a5:8d:d3:
                    91:42:20:e3:3b:f0:0a:c6:46:ee:1e:1f:fb:17:6e:
                    4b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:75:60:F5:3B:13:05:1B:AF:14:02:CB:26:07:4E:9A:9F:B4:16:26
            X509v3 Authority Key Identifier:
                keyid:00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/cXVg9TsTBRuvFALLJgdOmp-0FiY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/AG5kPQtn9LMz_qzcRhbU5PPeMs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.153.93.0/24
                IPv6:
                  2a0c:f280::/29

    Signature Algorithm: sha256WithRSAEncryption
         0f:a6:d4:cc:e1:2d:11:8c:0e:f3:98:23:45:66:ee:e5:c4:a2:
         f0:ea:86:21:f7:8d:c5:7b:a2:96:a5:bd:00:a3:47:7f:74:52:
         46:45:6d:92:fe:13:03:15:90:75:c7:c1:3a:3a:8e:c2:d9:e3:
         ca:0f:16:8a:5b:48:5f:b9:67:5d:35:67:76:57:bd:5a:e0:ea:
         f2:6f:52:36:db:aa:a5:38:b5:57:b2:f3:ec:8e:17:cc:f5:8b:
         4d:5d:90:b0:74:63:5f:2f:34:f5:75:da:99:f8:a0:c8:df:72:
         ec:31:24:be:46:38:b3:66:97:1f:f0:8d:91:8a:f6:37:d2:3f:
         a1:76:28:bb:13:52:9a:63:1d:11:13:bb:19:f4:b3:ca:c5:d8:
         d7:ed:b8:83:35:d1:e3:92:6c:38:99:81:50:f0:bc:34:99:b1:
         b6:34:17:72:4c:37:70:80:5c:e3:6a:b9:49:58:4e:43:c5:9e:
         f4:be:c4:3a:3a:54:15:db:58:00:8e:be:60:74:50:92:02:59:
         24:50:8b:82:bb:2a:27:05:21:bf:66:2a:b4:25:71:60:60:9a:
         6e:04:5d:d4:7f:66:63:5f:7d:b4:3f:29:de:af:da:2f:d2:25:
         6b:db:36:e5:79:ac:89:3e:9c:10:40:76:84:08:7c:96:9b:3c:
         61:78:ec:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:58 2024 by rpki-client on console-ams.rpki-client.org